EUVD-2011-0573

The TextXtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a Director file with a crafted DEMX RIFF chunk that triggers incorrect buffer allocation, a different vulnerability than...

CVE-2010-4306

CVE-2010-4306 affects Adobe Shockwave Player prior to version 11.5.9.620. The vulnerability allows arbitrary code execution or a denial of service due to memory corruption via unspecified vectors. The entry notes multiple related CVEs and a high-severity impact (NVD base score 9.3). There are no ...

CVE-2010-4189

Adobe Shockwave Player contains a vulnerability in the IML32 module used when parsing GIFs within Director movies. A crafted GIF image with a manipulated global color table size triggers an out-of-range pointer offset, enabling memory corruption and potentially arbitrary code execution or a denia...

CVE-2010-2587

Adobe Shockwave Player (dirapi.dll) is affected by CVE-2010-2587 and related CVEs due to a parsing flaw in the IFWV chunk size handling that can lead to memory corruption and potentially arbitrary code execution or a denial of service. Affected product/version: Shockwave Player prior to 11.5.9.62...

CVE-2010-4196

The Shockwave 3d Asset module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors...

CVE-2010-4191

Adobe Shockwave Player is affected by multiple remote code execution and memory corruption vulnerabilities (CVE-2010-2587/2588/2589, 2010-4092/4093/4187/4190/4191/4192/4306/4194/4195/4196, 2011-0555/0556/0557/0569, among others) tied to the dirapi.dll and related components. The consolidated advi...

CVE-2010-4192

Adobe Shockwave Player before 11.5.9.620 is affected by CVE-2010-4192, among others, via a crafted Director 3D Assets 0xFFFFFF88 record that triggers an incorrect memory allocation. This can lead to arbitrary code execution or memory corruption and, in some cases, a denial of service. The vulnera...

CVE-2010-4190

Adobe Shockwave Player (pre-11.5.9.620) is affected by CVE-2010-4190 through malformed CSWV RIFF chunks that miscalculate an offset for a substructure, causing an out-of-bounds heap memory seek and potential arbitrary code execution or memory corruption. Root cause: incorrect offset calculation d...

CVE-2010-2589

CVE-2010-2589 : Integer overflow in the dirapi.dll of Adobe Shockwave Player (pre-11.5.9.620) can lead to arbitrary code execution. Affected versions include 11.5.9.615 and earlier. Remediation: upgrade to 11.5.9.620 per APSB11-01. "

CVE-2011-0555

CVE-2011-0555 affects Adobe Shockwave Player (TextXtra.x32). A crafted DEMX RIFF chunk in a Director file triggers incorrect buffer allocation during parsing, leading to remote code execution or heap memory corruption. Affected: Shockwave Player versions before 11.5.9.620. Mitigation: update to 1...

CVE-2010-4307

Adobe Shockwave Player (Windows/macOS) prior to 11.5.9.620 is affected by CVE-2010-4307 and related vulnerabilities in the Shockwave dirapi.dll and other components, enabling arbitrary code execution on successful exploitation. The public advisories (APSB11-01) state that updating to 11.5.9.620 m...

CVE-2010-4190

Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a Director movie with a crafted CSWV RIFF chunk that causes an incorrect calculation of an offset for a substructure, which causes an out-of-bounds "seek" of heap...

CVE-2010-4188

CVE-2010-4188 affects Adobe Shockwave Player and involves a heap-based buffer overflow in the dirapi.dll module caused by processing a Director movie with an IFWV chunk size of 0. This can lead to remote code execution or memory corruption. The vulnerability is part of a set of issues in Shockwav...

CVE-2010-2588

Adobe Shockwave Player

CVE-2010-4196

Adobe Shockwave Player contains a vulnerability in the 3D Asset module where input data is not properly validated, enabling arbitrary code execution. Affected product/version: Shockwave Player before 11.5.9.620 (Windows/Mac). Root cause: improper validation in the 3D Assets handling. Impact: remo...

CVE-2010-4195

Adobe Shockwave Player TextXtra.x32 DEMUX parsing path (TextXtra module) before 11.5.9.620 contains an input validation flaw that can lead to remote arbitrary code execution when processing unspecified input data. Details indicate multiple CVEs (including CVE-2010-4195) under APSB11-01; exact vec...

CVE-2010-2587

The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2010-2588 and CVE-2010-4188...

CVE-2010-2588

The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2010-2587 and CVE-2010-4188...

CVE-2010-4306

Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4187, CVE-2010-4190, CVE-2010-4191, and CVE-2010-4192...

CVE-2011-0556

Adobe Shockwave Player (Windows/macOS) is affected by CVE-2011-0556 via the Font Xtra.x32 module. The vulnerability stems from parsing the PFR1 chunk where a 16-bit size value is sign-extended, enabling memory corruption and arbitrary code execution or a crash. Affected versions are before 11.5.9...